Method and apparatus for security configuration in wireless communication system

Abstract

Disclosed is a method for a security configuration in a wireless communication system and an apparatus using the same. Specifically, in a method for performing a security configuration by a UE (User Equipment), the method may comprise steps of transmitting a security capability of the UE to a network, receiving security information determined by the network from the network, and determining an action of the UE, based on a configuration of a security control configured in the UE and the security information received from the network, and the configuration of the security control may includes a security capability item, a control condition of the security capability item, and the action of the UE in accordance with the control condition.

What is claimed is: 
     
         1 . A method of performing a security configuration by a UE (User Equipment) in a wireless communication system, the method comprising steps of:
 transmitting a security capability of the UE to a network;   receiving security information determined by the network from the network; and   determining an action of the UE, based on a configuration of a security control configured in the UE and the security information received from the network, and   wherein the configuration of the security control includes a security capability item, a control condition of the security capability item, and the action of the UE according to the control condition.   
     
     
         2 . The method of  claim 1 , wherein the security capability item includes an authentication method, an encryption algorithm, and an integrity algorithm. 
     
     
         3 . The method of  claim 2 , wherein if the control condition indicates one or more values of the security capability item,
 when the security information indicates the one or more values of the security capability item, the action of the UE is performed.   
     
     
         4 . The method of  claim 2 , if the control condition indicates a change of value of the security capability item, and
 when a value of the security capability item applied to communication between the UE and the network is changed depending on a value indicated by the security information, the action of the UE is performed.   
     
     
         5 . The method of  claim 2 ,
 wherein the action includes an action of accepting the security information received from the network, an action of retransmitting the security capability of the UE to the network, and an action of disconnecting a connection with the network.   
     
     
         6 . The method of  claim 1 ,
 wherein the configuration of the security control is provisioned to the UE by the network, and/or is configured to the UE based on one or more among an input from a user, a requirement of application and application/service.   
     
     
         7 . The method of  claim 1 ,
 wherein when the configuration of the security control of the network is provisioned to the UE by the network, and the configuration of the security control of the user is configured by the UE,   a configuration of the security control with a high priority is configured by the UE, among the configuration of the security control of the network and the configuration of the security control of the user.   
     
     
         8 . The method of  claim 1 ,
 wherein whether the security information received from the network is notified of the user, is determined based on the configuration of the security indication configured in the UE and the security information received from the network, and   the configuration of the security indication includes an security capability item, an indication condition of the security capability item.   
     
     
         9 . The method of  claim 8 ,
 wherein if the indication condition indicates one or more values of the security capability item,   when the security information indicates the one or more values of the security capability item, the notification is performed.   
     
     
         10 . The method of  claim 8 ,
 wherein if the indication condition indicates a change of the value of the security capability item, and   when a value of the security capability item applied to communication between the UE and the network is changed depending on a value indicated by the security information, the notification is performed.   
     
     
         11 . The method of  claim 8 ,
 wherein the notification is displayed in a top of a screen of the UE, displayed until an explicit confirmation is inputted from a user, or displayed during a predetermined time.   
     
     
         12 . A UE (User Equipment) for performing a security configuration in a wireless communication system, comprising:
 a radio frequency (RF) unit for transmitting and receiving a wireless signal; and   a processor for controlling the RF unit, and   wherein the processor configured to:   transmit a security capability of the UE to a network;   receive security information determined by the network from the network; and   determine an action of the UE, based on a configuration of a security control configured in the UE and the security information received from the network, and   wherein the configuration of the security control includes a security capability item, a control condition of the security capability item, and the action of the UE in accordance with the control condition.